Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/wrxulLFUJtpdD8S7eIP6wOKPIO4.roa
File: wrxulLFUJtpdD8S7eIP6wOKPIO4.roa (raw, json)
Hash identifier: HyudAwDb5/sezAzheAN0yRAXBysH5gtz476svFmbflM=
Subject key identifier: C2:BC:6E:94:B1:54:26:DA:5D:0F:C4:BB:78:83:FA:C0:E2:8F:20:EE
Certificate issuer: /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Certificate serial: 01856FDDC5612813ECF3F2640348E9F9A3A2
Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/wrxulLFUJtpdD8S7eIP6wOKPIO4.roa
Signing time: Mon 02 Jan 2023 00:24:43 +0000
ROA not before: Mon 02 Jan 2023 00:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 781
IP address blocks: 2a0c:1100::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:c5:61:28:13:ec:f3:f2:64:03:48:e9:f9:a3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Validity
Not Before: Jan 2 00:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2bc6e94b15426da5d0fc4bb7883fac0e28f20ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:c8:b5:a6:f3:03:28:12:c8:2b:53:85:25:
4f:2a:3a:a3:aa:e8:fa:78:3a:b7:41:0f:cc:87:29:
f8:82:2b:29:84:08:9c:50:a0:a5:28:65:07:30:44:
5f:45:c6:21:3c:20:9b:30:4c:af:7f:2a:e5:94:fa:
e6:09:ff:12:74:02:2d:c6:32:3a:db:7c:81:5f:58:
26:d0:c6:73:95:a3:ea:35:1c:44:37:65:7b:c5:ce:
5b:e5:8f:fb:54:bc:16:db:a0:95:5b:06:07:c0:43:
a9:86:96:5b:27:7d:f9:58:07:8e:4b:ce:0e:31:39:
90:f6:3e:82:9d:1d:73:40:a8:5f:a2:ad:6b:ed:28:
ac:3c:4b:a9:d4:80:5a:8d:fd:85:71:68:5f:10:01:
b3:15:b4:53:3e:9f:6a:64:b7:ff:f7:76:4c:32:e1:
5a:89:8d:3d:af:b0:9a:0f:43:78:5c:ef:17:b7:13:
53:b6:f4:0a:70:fe:c2:5a:07:a3:a2:44:1f:75:82:
e2:52:db:4b:43:41:c7:b0:10:bf:75:a8:7d:00:29:
78:ce:a9:98:d4:5e:89:7b:1d:22:31:bf:80:44:ef:
be:2d:36:43:ee:8c:5a:e2:47:b8:7a:60:fc:2e:6a:
1d:81:a0:f5:26:fb:7c:9d:98:b9:22:fe:5c:7f:62:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BC:6E:94:B1:54:26:DA:5D:0F:C4:BB:78:83:FA:C0:E2:8F:20:EE
X509v3 Authority Key Identifier:
keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/wrxulLFUJtpdD8S7eIP6wOKPIO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:1100::/32
Signature Algorithm: sha256WithRSAEncryption
56:ce:95:25:a0:03:a5:8c:ed:af:a0:10:e4:61:2d:1f:d3:6f:
5e:c2:c6:d2:75:dc:6f:43:57:2f:be:c4:17:e2:29:4b:f5:53:
04:31:44:52:35:a1:20:6c:1a:85:78:6b:ca:86:66:26:23:8e:
27:15:66:ee:c6:fd:f3:c4:4f:6a:26:2f:cf:a6:f7:e6:a1:ab:
07:22:7f:f5:85:2d:11:51:90:ce:9d:1b:7a:0a:d5:72:91:60:
3a:db:c1:91:5a:d8:9b:85:c9:1d:86:8e:8d:85:56:b5:25:cf:
7e:b1:b7:b8:d0:5d:bf:4b:00:c0:16:47:32:9c:f7:e3:e0:a7:
a3:90:5c:01:80:17:19:1c:48:4f:1e:1e:95:40:ff:7a:b5:93:
d7:4f:cb:79:5c:b9:b8:2b:c2:38:a5:51:37:18:aa:dc:9f:ea:
05:a8:b3:7c:a6:2e:20:2b:85:2a:bf:a4:ab:1d:a6:39:98:5a:
e0:65:2e:ba:c3:af:bd:15:5d:1b:86:f1:f3:04:12:f8:96:76:
b9:0d:f2:5d:0c:de:a9:94:d2:26:fc:9b:7d:f5:f4:57:df:2e:
07:39:13:21:2b:58:0c:c5:67:8a:6c:51:39:ed:af:e0:6d:7d:
16:e3:d9:c9:1a:10:b3:d9:3e:c8:56:18:bf:18:da:6c:c9:c9:
fa:ff:46:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:51 2024 by rpki-client on console-fra.rpki-client.org